Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/HYSP/6/AS211759.roa
File:                     AS211759.roa (raw, json)
Hash identifier:          9anC+HHQ/ciPjNw4mj2sSjHi83t2/Sc4C0VU2ueXasc=
Subject key identifier:   D3:8B:9B:9A:F7:A5:C0:CE:54:51:09:DB:B3:F8:20:75:EB:B4:E0:BD
Certificate issuer:       /CN=b57dcba9fc7b0ef1f3cc80a1aee22c00198e767a
Certificate serial:       2CD5475A79562EEE7CD1B5E1C4CF7904C32600C7
Authority key identifier: B5:7D:CB:A9:FC:7B:0E:F1:F3:CC:80:A1:AE:E2:2C:00:19:8E:76:7A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tX3Lqfx7DvHzzIChruIsABmOdno.cer
Subject info access:      rsync://rpki.co/repo/HYSP/6/AS211759.roa
Signing time:             Sat 08 Apr 2023 03:25:31 +0000
ROA not before:           Sat 08 Apr 2023 03:20:31 +0000
ROA not after:            Sat 06 Apr 2024 03:25:31 +0000
asID:                     211759
IP address blocks:        2a12:dd47:f100::/40 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:d5:47:5a:79:56:2e:ee:7c:d1:b5:e1:c4:cf:79:04:c3:26:00:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b57dcba9fc7b0ef1f3cc80a1aee22c00198e767a
        Validity
            Not Before: Apr  8 03:20:31 2023 GMT
            Not After : Apr  6 03:25:31 2024 GMT
        Subject: CN=D38B9B9AF7A5C0CE545109DBB3F82075EBB4E0BD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:44:d6:68:c4:0f:1e:df:a2:3d:69:df:b8:81:
                    86:cb:9b:e7:2a:99:ea:60:b5:85:0c:c2:14:95:25:
                    cb:f9:54:61:df:21:0b:36:48:de:23:fa:ce:d0:85:
                    85:ea:32:33:a9:5f:94:0b:45:f7:52:a4:8c:7a:99:
                    53:0f:34:cf:67:ea:8c:bb:7d:0e:f1:11:a4:13:54:
                    79:a6:a2:bb:42:c7:52:a7:98:92:5e:24:1c:e6:c7:
                    37:be:67:6b:af:53:ac:c9:c9:96:65:a1:16:a5:64:
                    a3:5a:74:b4:49:10:96:62:9b:54:92:e1:d8:75:70:
                    71:1f:62:f9:a8:78:e1:d7:74:8b:34:80:8b:11:cb:
                    3b:fe:13:61:80:88:2a:cd:07:89:f4:bd:66:ae:e9:
                    4f:3b:5c:d6:20:b9:00:e3:37:ac:ea:b5:38:46:7a:
                    8f:15:4a:75:10:84:82:6b:0d:3f:57:ed:00:fa:be:
                    ac:55:79:f9:d5:c3:30:6d:8d:a1:3f:19:4d:ad:cc:
                    27:10:6c:51:1f:25:d9:11:5f:bc:26:b7:6f:09:bf:
                    c8:20:d7:fa:84:06:a6:f4:59:1a:33:61:3c:ce:32:
                    a8:e1:43:e3:c7:dc:e3:69:ca:dd:5d:78:1f:7e:e5:
                    6e:14:ec:88:b1:cf:72:ef:f2:c6:90:a9:f4:9a:ff:
                    2b:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:8B:9B:9A:F7:A5:C0:CE:54:51:09:DB:B3:F8:20:75:EB:B4:E0:BD
            X509v3 Authority Key Identifier:
                keyid:B5:7D:CB:A9:FC:7B:0E:F1:F3:CC:80:A1:AE:E2:2C:00:19:8E:76:7A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/HYSP/6/B57DCBA9FC7B0EF1F3CC80A1AEE22C00198E767A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tX3Lqfx7DvHzzIChruIsABmOdno.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/HYSP/6/AS211759.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a12:dd47:f100::/40

    Signature Algorithm: sha256WithRSAEncryption
         5e:88:e6:2f:df:eb:07:e7:9b:27:66:d9:ad:21:af:ed:ed:23:
         0a:46:51:72:e2:21:27:59:4f:f7:43:14:ae:a5:78:4d:fb:60:
         9d:58:b4:87:7d:51:70:36:16:ac:35:21:9b:14:d6:c4:7a:7b:
         de:b8:85:92:38:19:25:26:da:31:e2:59:c8:f9:07:1d:b3:71:
         8c:9c:04:61:2f:b3:b3:ec:35:3e:db:63:84:6c:78:3e:a3:7a:
         b7:8f:e6:6f:e8:b9:e5:08:30:10:00:d8:90:2c:e3:16:4f:8b:
         d8:90:7d:99:84:e5:17:93:45:8d:24:bf:38:2f:0f:24:00:e1:
         77:04:86:b5:36:7e:d0:32:37:02:5d:53:8f:27:21:61:b9:19:
         09:62:b1:58:2b:60:8c:ce:16:7d:55:bf:a8:fa:37:7b:c3:d9:
         9e:b1:b7:18:2a:ab:8d:a6:14:23:41:75:ad:d6:f4:27:b5:67:
         c1:d7:11:35:a1:e3:e9:ec:7a:6f:79:f0:01:fc:85:d5:96:fd:
         c2:14:a4:54:26:99:e2:40:27:f1:23:9a:c6:73:19:47:f5:3e:
         7e:36:da:bc:98:ff:1d:b1:a1:e8:6e:5a:17:22:c8:b9:64:b9:
         bd:37:6d:41:47:af:e2:bd:0d:4a:ce:91:e3:9d:0d:8c:f8:00:
         de:ac:68:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----